General

  • Target

    8d48ecd87e0d6f6d97faf98647424cb176df35a64bfcbf6ea19382831d70cec7N

  • Size

    256KB

  • MD5

    fbc4e609e218f3368acb82152e2e79b0

  • SHA1

    6c7d58b283c77726bf3edec545d6b9c206363f2f

  • SHA256

    8d48ecd87e0d6f6d97faf98647424cb176df35a64bfcbf6ea19382831d70cec7

  • SHA512

    ae85804af773362d336fd847f2eca23392d0a7d9bcb99b17fc2178b52d041f319f975f939b143486e045a5dc83e5787623c0016b5930c149872eeec7cd8b5204

  • SSDEEP

    6144:CETa3WaEV+tbFOLM77OLnFe3HCqxNRmJ4PavntV:jTm7tsNePmjvtV

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 8d48ecd87e0d6f6d97faf98647424cb176df35a64bfcbf6ea19382831d70cec7N
    .exe windows:1 windows x86 arch:x86

    26babd76bbb7f9c516a338b0601b4c9f


    Headers

    Imports

    Sections